$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa File: 1c886de0-6a95-394f-b0ec-798264a9c720.roa (raw, json) Hash identifier: +5+eeoVfa4nD4PBcKptzIQMi12KKTbTG479X0u0FL90= Subject key identifier: AD:E8:D8:EC:B4:4D:15:F3:BD:65:47:C8:C5:18:E3:92:B2:10:F6:39 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B64CE626F434487AE77848D80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 12041 IP address blocks: 2001:500:c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:62:6f:43:44:87:ae:77:84:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=9bb490a9-5bc8-4829-b99b-03ff66e7aa5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f7:aa:23:99:dd:c5:57:09:3f:55:a8:5b:8e: f8:5d:e3:8c:73:73:d8:16:ff:e4:ac:cb:bd:3a:f6: b9:b3:50:91:a2:05:ec:dd:ae:ca:87:6d:19:2e:50: b1:5e:07:e9:e0:10:0d:8c:e5:16:fd:19:46:fb:81: dd:37:8a:9a:bb:40:87:7a:4a:ec:1a:00:18:0f:9c: d0:cd:1f:8d:ec:da:ed:88:58:7f:86:70:fd:9d:6c: 09:70:b8:dc:8e:ba:46:59:f9:66:da:aa:17:f5:e3: 91:37:6a:4e:60:eb:86:33:7a:32:e0:09:c7:0b:ab: e2:e7:f3:79:69:03:a4:1b:c4:7d:83:74:8a:82:2a: 68:22:05:22:a9:ff:21:b5:f9:e3:30:1d:2f:e6:23: 61:94:b3:05:03:5a:3c:3f:c3:65:77:2c:58:12:0a: 8b:c1:60:a0:ae:35:1b:a3:7e:d0:5b:2f:ab:b0:3b: d3:65:f0:94:ff:c3:98:33:dd:b9:a2:28:5b:ba:32: 34:15:f6:c2:63:fd:89:99:4b:61:1d:5a:95:01:82: 77:c6:bb:85:8c:13:c3:f2:12:ca:d3:85:e1:2c:fe: 14:29:8e:c6:39:10:f4:20:38:7d:76:e0:28:19:60: 7d:dd:2b:d6:7e:7a:72:2f:3e:fd:ce:97:0c:42:4f: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E8:D8:EC:B4:4D:15:F3:BD:65:47:C8:C5:18:E3:92:B2:10:F6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c886de0-6a95-394f-b0ec-798264a9c720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:c8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:3f:53:64:45:84:c6:db:c8:0f:48:49:54:f7:32:03:eb:c7: 55:7d:38:90:03:0c:bd:fe:d1:a6:6a:98:41:87:75:22:7b:49: b6:13:78:88:72:d4:d7:79:d2:88:35:78:0d:53:8d:96:1f:2c: 7d:c5:bc:15:4d:8c:af:73:92:81:da:f0:26:03:ef:f0:05:ce: b7:ab:a1:f3:00:50:43:5d:ca:76:78:c6:5d:f2:48:e1:cf:8a: 85:1a:3c:fc:f3:11:8c:73:f5:91:11:59:18:f4:84:97:bb:99: 65:dd:dd:df:02:0e:dc:f6:c5:90:23:74:66:80:82:3d:c6:cd: b3:be:c2:63:6b:d7:61:d8:69:93:2e:3c:a7:1a:31:f9:ca:4a: df:8a:f4:09:22:21:5a:07:78:10:56:39:5f:23:74:86:16:a3: b3:62:8b:31:3b:df:58:e8:80:d2:89:86:c5:cc:1d:fc:bf:f6: b5:67:71:34:a1:ae:d6:72:3e:34:13:f8:51:54:7d:78:09:c6: a9:55:65:23:13:cb:55:2a:c0:71:f9:b3:4f:43:f5:97:5c:65: 49:b5:60:6a:0c:5a:5a:35:6a:f3:d1:a0:a8:cb:7e:77:a9:47: 45:f8:aa:a2:03:2d:4e:99:06:f6:ec:4a:bf:c1:23:b9:b8:4d: 3b:ed:00:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzmJvQ0SHrneEjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OWJiNDkwYTktNWJjOC00ODI5LWI5OWItMDNmZjY2ZTdhYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPeqI5ndxVcJP1WoW474XeOMc3PYFv/krMu9 Ova5s1CRogXs3a7Kh20ZLlCxXgfp4BANjOUW/RlG+4HdN4qau0CHekrsGgAYD5zQ zR+N7NrtiFh/hnD9nWwJcLjcjrpGWflm2qoX9eORN2pOYOuGM3oy4AnHC6vi5/N5 aQOkG8R9g3SKgipoIgUiqf8htfnjMB0v5iNhlLMFA1o8P8NldyxYEgqLwWCgrjUb o37QWy+rsDvTZfCU/8OYM925oihbujI0FfbCY/2JmUthHVqVAYJ3xruFjBPD8hLK 04XhLP4UKY7GORD0IDh9duAoGWB93SvWfnpyLz79zpcMQk+17wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK3o2Oy0TRXzvWVHyMUY45KyEPY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWM4ODZkZTAtNmE5NS0z OTRmLWIwZWMtNzk4MjY0YTljNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAADI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE8/U2RFhMbbyA9ISVT3MgPrx1V9OJADDL3+0aZqmEGHdSJ7SbYT eIhy1Nd50og1eA1TjZYfLH3FvBVNjK9zkoHa8CYD7/AFzrerofMAUENdynZ4xl3y SOHPioUaPPzzEYxz9ZERWRj0hJe7mWXd3d8CDtz2xZAjdGaAgj3GzbO+wmNr12HY aZMuPKcaMfnKSt+K9AkiIVoHeBBWOV8jdIYWo7NiizE731jogNKJhsXMHfy/9rVn cTShrtZyPjQT+FFUfXgJxqlVZSMTy1UqwHH5s09D9ZdcZUm1YGoMWlo1avPRoKjL fnepR0X4qqIDLU6ZBvbsSr/BI7m4TTvtAGQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:04:07 2025 by rpki-client